diff --git a/spring-security-kerberos-core/src/main/java/org/springframework/security/extensions/kerberos/SunJaasKerberosTicketValidator.java b/spring-security-kerberos-core/src/main/java/org/springframework/security/extensions/kerberos/SunJaasKerberosTicketValidator.java
index e3085ba..3988a7f 100644
--- a/spring-security-kerberos-core/src/main/java/org/springframework/security/extensions/kerberos/SunJaasKerberosTicketValidator.java
+++ b/spring-security-kerberos-core/src/main/java/org/springframework/security/extensions/kerberos/SunJaasKerberosTicketValidator.java
@@ -112,6 +112,7 @@ public class SunJaasKerberosTicketValidator implements KerberosTicketValidator,
public LoginConfig(String keyTabLocation, String servicePrincipalName, boolean debug) {
this.keyTabLocation = keyTabLocation;
this.servicePrincipalName = servicePrincipalName;
+ this.debug = debug;
}
@Override
@@ -125,7 +126,7 @@ public class SunJaasKerberosTicketValidator implements KerberosTicketValidator,
if (this.debug) {
options.put("debug", "true");
}
- options.put("isInitiator", "true");
+ options.put("isInitiator", "false");
return new AppConfigurationEntry[] { new AppConfigurationEntry("com.sun.security.auth.module.Krb5LoginModule",
AppConfigurationEntry.LoginModuleControlFlag.REQUIRED, options), };
diff --git a/spring-security-kerberos-sample/src/main/webapp/WEB-INF/security.xml b/spring-security-kerberos-sample/src/main/webapp/WEB-INF/security.xml
index fb45cec..60662a3 100644
--- a/spring-security-kerberos-sample/src/main/webapp/WEB-INF/security.xml
+++ b/spring-security-kerberos-sample/src/main/webapp/WEB-INF/security.xml
@@ -13,9 +13,6 @@
-
-
@@ -30,8 +27,9 @@
-
-
+
+
+